Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
File:                     6x5t-zkpXJOgRyycE1WUAYqPy1w.mft (raw, json)
Hash identifier:          3H8SHBRtiPgpBxMMN1prpPHkzhhAc+qwQu5mAYSZBd0=
Subject key identifier:   DE:70:0E:91:13:CC:89:E9:76:11:00:B9:DA:AC:42:26:08:D8:D0:38
Authority key identifier: EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
Certificate issuer:       /CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Certificate serial:       019FAA1A257EB48FA6B7C90004E85E77D474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
Manifest number:          08C6
Signing time:             Tue 28 Jul 2026 19:01:07 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:07 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:07 +0000
Files and hashes:         1: 6x5t-zkpXJOgRyycE1WUAYqPy1w.crl (hash: QsS1dy2ZnOqnPIltaIs7ut87yhfcj7uMojrzbimdRL0=)
                          2: biVvko4MLtx-74JBOEP2EI3N-Oo.asa (hash: Lh4Z77PwR1YKafsnPLruDB7D3sutTeLQwlDUIfN21i0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:25:7e:b4:8f:a6:b7:c9:00:04:e8:5e:77:d4:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
        Validity
            Not Before: Jul 28 19:01:07 2026 GMT
            Not After : Jul 29 19:01:07 2026 GMT
        Subject: CN=de700e9113cc89e9761100b9daac422608d8d038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:f3:b0:b8:db:3f:d9:32:65:cf:97:21:aa:
                    a4:51:59:e0:77:47:51:38:89:e8:e4:fd:3e:0c:a1:
                    ad:c2:62:8a:d3:e8:5c:1d:8a:b1:11:8d:7b:1b:88:
                    63:ed:74:44:f3:0e:6b:53:b5:29:ff:cd:90:3d:80:
                    bf:5a:71:c1:1b:50:53:36:63:3e:dd:3d:4c:62:6e:
                    77:ee:19:84:bf:ce:c4:7c:66:c7:14:26:be:e3:33:
                    1b:d2:4d:f9:81:92:7e:2c:e8:04:7b:b4:da:3a:ee:
                    ed:6e:e8:95:33:79:56:5d:d3:ba:50:21:08:ac:00:
                    5b:9a:02:66:9a:85:e6:f2:04:dd:7c:6a:eb:32:3a:
                    ca:cc:74:0e:bb:37:ac:64:45:cb:d5:77:ab:47:bd:
                    be:eb:0e:21:9e:af:51:a3:13:49:d3:ef:db:1e:1e:
                    3a:94:b7:39:03:1b:39:84:67:35:86:37:97:04:42:
                    bc:fd:70:7c:dd:66:1f:7e:e6:bb:28:a1:14:da:db:
                    6e:69:c3:2c:91:ca:70:ef:5b:1d:f6:4d:05:5c:cb:
                    a0:e1:c2:0c:55:1c:e7:1a:51:2a:60:36:fd:94:54:
                    98:ef:d8:b1:ee:73:c7:df:22:90:81:ac:0e:72:84:
                    e7:aa:f8:d0:e3:f4:44:7e:fc:42:58:40:2f:d6:96:
                    7c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:70:0E:91:13:CC:89:E9:76:11:00:B9:DA:AC:42:26:08:D8:D0:38
            X509v3 Authority Key Identifier:
                keyid:EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:00:2c:a9:89:af:4c:c2:de:b1:69:fc:9e:25:20:ca:bf:28:
         6a:3b:34:f5:5f:ef:c8:b0:41:d0:80:00:54:f5:16:43:f9:b2:
         29:a0:ff:49:58:89:29:76:67:65:84:75:c1:c8:f8:85:8a:c3:
         73:d6:9d:b7:a9:88:81:e6:c2:3b:f9:52:56:57:df:1f:8e:78:
         45:97:36:76:e7:af:23:5c:9a:b4:57:59:1f:97:da:34:73:64:
         8d:3f:a8:5a:f5:9b:bf:06:f2:fd:eb:74:f9:de:24:e3:77:6d:
         75:dc:0e:32:e9:f8:14:77:58:ff:4d:5a:54:4a:a8:69:57:74:
         38:a2:48:2b:f8:a3:37:c9:5b:d7:46:3c:b0:85:f9:b4:c6:d0:
         02:2d:fe:50:17:08:99:56:9d:76:15:09:72:62:73:d5:bf:c6:
         b4:f2:30:d3:e0:f3:5c:1f:13:63:e3:f8:05:c9:68:4d:7d:04:
         21:ab:1f:01:3e:61:c8:fe:a2:72:87:f1:1c:51:2f:1a:b5:db:
         b6:c4:7d:2c:61:9e:76:49:0f:17:29:bc:8d:7b:61:d5:fa:53:
         79:d4:2c:9b:ca:f0:a2:f1:d8:0a:20:89:bf:dc:27:9c:6e:6a:
         af:48:ea:bc:19:24:c0:fc:21:82:21:90:7a:4d:5e:99:d2:0e:
         87:f2:16:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:55:39 2026 by rpki-client